Revision3Revision3, an online TV network recently found themselves under a SYN flood attack by a large network of servers. In this attack, Revision3 found that their main HTTP server, RSS server and e-mail server were all down. In tracing the attack, Revision3 determined that the attack was originating from an infamous cyberterrorist organization known as MediaDefender. MediaDefender is a company hired by the RIAA, MPAA, and other organizations to stop illegal distribution of copyrighted content. (I’m not even going to link to them in this post.) The question remains – why would MediaDefender attack a Revision3? They’re distributing their own content via BitTorrent to lower the load on their HTTP/FTP servers. BitTorrent uses distributed traffic to proliferate content, see the wikipedia article if you still don’t understand it. It turns out that MediaDefender has a sophisticated network of servers programmed into inject fake torrents or content into these servers so that once someone downloads this content, thinking it is a CD, some software, or a movie, MediaDefender has their IP address and other information that can be used in court. Sound like entrapment? Almost, but not quite. Revision3 began to notice non-Revision3 torrents being added to their public and open BitTorrent tracker (the server which coordinates BitTorrent downloads), removed them, and blocked MediaDefender’s access -triggering MediaDefender’s servers to attempt a different tactic to disrupt the BitTorrent traffic – a denial of service attack (DoS). By sending thousands of SYN packets (which are much like a brief “hi”) to Revision3′s servers, they effectively shut down Revision3′s internet distribution infastructure, as well as their corporate e-mail.

Here’s where the problem comes in. Revision3 doesn’t distribute illegal content at all. They were simply a distributor using a protocol and process that is just as easily legitimately used for legal content, despite the reputation of being an agent of illegal P2P. MediaDefender may not have targeted Revision3, but what they did is still illegal, under numerous US statutes. MediaDefender’s DoS approach to stopping or scaring P2P users is illegal. I seriously hope that they’re sued, in the name of internet justice. Their servers apply a “if I can’t have what I want, nobody will get it” approach not unlike a child’s temper tantrum. This child needs to be punished and grounded. I will not be surprised if these cyberterrorists are shut down by the FBI or by lawsuits from companies like Revision3.